Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
File:                     mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft (raw, json)
Hash identifier:          978/LUqq18Mn9W/F7ootLoK1GFvYuOH2+p8fhFMSRq8=
Subject key identifier:   B6:66:A3:F1:B8:0B:96:F3:97:CF:9C:47:06:84:B3:75:6E:6D:01:9C
Authority key identifier: 98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB
Certificate issuer:       /CN=F36B5362AF/serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
Certificate serial:       25
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
Manifest number:          24
Signing time:             Wed 05 Nov 2025 05:45:02 +0000
Manifest this update:     Wed 05 Nov 2025 05:45:01 +0000
Manifest next update:     Fri 07 Nov 2025 05:45:01 +0000
Files and hashes:         1: mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl (hash: mZTxdbU1nqtJKqXSXl8ERM4fdbMHVdCLFF4zzyUmhfA=)
                          2: C9A68EA4A28611F086BAC69BDAE4EC9C.roa (hash: 7VlIZ2iujVms/bcZzJtHMjuTIN2+7NdE9XhtEe0/jW8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5362AF, serialNumber=9825EAA3143A2908FA8897D522A54099918632DB
        Validity
            Not Before: Nov  5 05:45:01 2025 GMT
            Not After : Nov  7 05:45:01 2025 GMT
        Subject: CN=690ae45e-52c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7e:0f:00:6f:5a:8e:a7:e8:66:0b:5b:d9:c9:
                    2c:05:d1:3e:15:55:60:72:5f:4b:40:54:8a:fe:79:
                    24:e3:2f:29:ba:98:94:e3:f6:75:c8:a0:66:54:74:
                    ab:fb:28:90:a4:50:1a:71:be:92:00:46:36:be:25:
                    4b:58:e8:be:3d:d1:6c:48:a4:94:94:e2:f5:e8:47:
                    29:55:a6:53:21:64:d7:86:62:4d:d9:6b:2e:a2:4a:
                    f0:2d:fd:1b:ab:97:2d:c9:0e:73:79:bd:43:f5:c8:
                    8c:6e:21:df:b8:fa:c4:c2:1f:18:91:e7:26:ae:0f:
                    98:ff:24:5a:4f:cd:f5:b7:b0:0d:b9:b4:0b:c8:f9:
                    4a:8d:0b:ee:19:f0:c8:ca:53:7b:64:f3:0f:40:eb:
                    03:33:bf:93:b7:57:d8:60:f2:ef:1f:92:64:88:95:
                    0e:99:51:bb:67:72:a5:38:1a:f8:09:26:ad:47:83:
                    f1:50:12:f2:ab:a4:8b:e7:01:a1:85:0d:2c:99:a6:
                    5c:03:aa:d4:ee:df:d3:28:59:91:58:55:8f:64:c5:
                    90:af:b6:28:c0:05:3d:75:19:da:34:f8:2f:ca:c1:
                    87:52:6b:b1:e3:43:00:8b:bb:24:07:36:90:9c:6a:
                    aa:1e:b3:33:a1:d9:1f:5a:4c:c4:d6:56:57:e1:c0:
                    1d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:66:A3:F1:B8:0B:96:F3:97:CF:9C:47:06:84:B3:75:6E:6D:01:9C
            X509v3 Authority Key Identifier:
                keyid:98:25:EA:A3:14:3A:29:08:FA:88:97:D5:22:A5:40:99:91:86:32:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mCXqoxQ6KQj6iJfVIqVAmZGGMts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5362/B104353AA03911F0B898B5A8DAE4EC9C/mCXqoxQ6KQj6iJfVIqVAmZGGMts.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:da:39:bc:f1:8f:8d:1f:22:57:7c:04:28:43:ef:40:30:25:
         ce:65:a7:93:f1:bc:1d:28:38:3a:24:e2:b0:dc:02:4d:99:5f:
         15:f7:78:b2:56:fa:c0:08:5e:d2:ab:ba:af:32:84:b9:32:f4:
         0d:3c:bf:1d:e7:22:9a:f2:93:e6:77:b8:ff:62:d2:cc:ed:66:
         f4:df:91:a6:c7:1a:00:f6:35:74:3f:27:5b:6d:eb:f6:0a:6f:
         69:53:46:98:65:2e:c5:58:73:5b:b8:70:66:9e:b8:24:d1:f3:
         a6:84:47:d8:80:bf:e7:e2:6e:7e:5a:ce:d6:37:97:e6:c5:87:
         da:84:07:d1:d3:a1:13:6a:a0:86:39:6e:f1:e1:f1:fb:b9:86:
         0f:82:c7:15:9f:18:24:a1:4a:60:f1:7a:67:6c:60:e3:e3:09:
         c7:39:64:37:0b:82:da:2b:aa:8f:b5:7b:60:83:52:b8:4d:d0:
         08:67:18:3e:c1:91:39:5d:d0:75:98:69:b1:6a:cd:c0:be:e1:
         aa:ae:2d:1d:96:5f:10:5b:cf:41:1e:3b:43:5c:27:ca:17:f4:
         d2:75:39:10:3a:0c:49:04:36:8a:75:c4:e3:65:4e:30:75:48:
         03:37:17:1a:0c:c6:19:0f:8e:2e:3e:5d:39:73:e2:b4:e8:15:
         da:a3:ec:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:32:39 2025 by rpki-client